Collections have access control lists that determine what operations a user can perform. The entries in the list either corresponds to a specific user or to an entire group.
Vidispine uses the access controls on the collection to determine if a user has access to perform a specific operation or not.
All collections will have a OWNER access control that identifies the user that created the entity, and that grants full access to it.
POST /collection/VX-16/access Content-Type: application/xml
<AccessControlDocument xmlns="http://xml.vidispine.com/schema/vidispine"> <permission>READ</permission> <group>users</group> </AccessControlDocument>